category: Cloud Security provider: Palo Alto Networks sectionorder: - Connect - Collect commonfields: id: Palo Alto Networks Prisma AIRS - AI Runtime Security version: -1 configuration: - defaultvalue: https://api.sase.paloaltonetworks.com display: Server URL name: url required: true type: 0 section: Connect - display: API Client ID section: Connect name: credentials required: true type: 9 displaypassword: API Client Secret - display: Runtime API Key section: Connect name: runtime_api_key required: true type: 9 additionalinfo: Runtime API Key for Prisma AIRs Scanner API. This is used exclusively for runtime scanning operations and is different from the OAuth2 Client ID/Secret used for management operations. hiddenusername: true displaypassword: Runtime API Key - additionalinfo: 'Default Tenant Services Group ID to use for API calls. Example: 1234567890.' display: Tenant Services Group ID name: tsg_id required: true type: 0 section: Connect - display: Scanner API Base URL section: Connect name: scanner_base_url required: false type: 0 defaultvalue: https://service.api.aisecurity.paloaltonetworks.com additionalinfo: 'Scanner API base URL for runtime scanning operations. Default is US region. For other regions: EU: https://service-de.api.aisecurity.paloaltonetworks.com, IN: https://service-in.api.aisecurity.paloaltonetworks.com, SG: https://service-sg.api.aisecurity.paloaltonetworks.com. This must match the region selected during deployment profile creation.' advanced: true - display: DLP API Base URL section: Connect name: dlp_base_url required: false type: 0 defaultvalue: https://api.dlp.paloaltonetworks.com additionalinfo: DLP API base URL for DLP management operations (dictionaries, patterns, filtering profiles). Default is the global DLP endpoint. Change only if using a regional or custom DLP endpoint. advanced: true - defaultvalue: 'false' display: Trust any certificate (not secure) name: insecure type: 8 section: Connect advanced: true required: false - defaultvalue: 'false' display: Use system proxy settings name: proxy type: 8 section: Connect advanced: true required: false description: Integrate with Palo Alto Networks Prisma AIRs for AI security capabilities including runtime scanning, red teaming, AI supply chain security, and DLP configuration. display: Palo Alto Networks Prisma AIRS - AI Runtime Security name: Palo Alto Networks Prisma AIRS - AI Runtime Security script: commands: - name: prisma-airs-runtime-scan description: Scan a single prompt against a security profile for AI security threats. compliantpolicies: - EndPoint Isolation arguments: - name: profile_name required: true description: The name of the security profile to use for scanning. - name: prompt required: true description: The prompt text to scan. - name: response required: false description: The optional response text to scan alongside the prompt. - name: tr_id required: false description: The unique identifier string for correlating the prompt and response transactions. Returned in the scan response. - name: session_id required: false description: The unique identifier string for tracking sessions. Returned in the scan response. - name: app_name required: false description: The AI application requesting the content scan. - name: app_user required: false description: The end user using the AI application. - name: ai_model required: false description: The AI model serving the AI application. - name: user_ip required: false description: The end user IP address using the AI application. - name: agent_id required: false description: The agent identifier for metadata tracking. - name: agent_version required: false description: The agent version for metadata tracking. - name: agent_arn required: false description: The agent ARN for metadata tracking. outputs: - contextPath: PrismaAIRs.RuntimeScan.scan_id description: The unique scan identifier. type: String - contextPath: PrismaAIRs.RuntimeScan.report_id description: The report identifier for this scan. type: String - contextPath: PrismaAIRs.RuntimeScan.tr_id description: The transaction ID passed in the request and returned in the response. type: String - contextPath: PrismaAIRs.RuntimeScan.session_id description: The session ID passed in the request and returned in the response. type: String - contextPath: PrismaAIRs.RuntimeScan.prompt description: The scanned prompt text. type: String - contextPath: PrismaAIRs.RuntimeScan.response description: The scanned response text. type: String - contextPath: PrismaAIRs.RuntimeScan.action description: The action taken (allow or block). type: String - contextPath: PrismaAIRs.RuntimeScan.category description: The threat category (benign, malicious, etc.). type: String - contextPath: PrismaAIRs.RuntimeScan.detected description: Whether any threat was detected across prompt or response. type: Boolean - contextPath: PrismaAIRs.RuntimeScan.prompt_detected description: The object containing all detection types for the prompt (e.g., injection, dlp, toxic_content, topic_violation, url_cats, malicious_code, agent). type: Unknown - contextPath: PrismaAIRs.RuntimeScan.response_detected description: The object containing all detection types for the response (e.g., dlp, toxic_content, topic_violation, url_cats, malicious_code, agent, db_security, ungrounded). type: Unknown - contextPath: PrismaAIRs.RuntimeScan.profile_id description: The profile ID used for scanning. type: String - contextPath: PrismaAIRs.RuntimeScan.profile_name description: The profile name used for scanning. type: String - contextPath: PrismaAIRs.RuntimeScan.source description: The source of the scan request. type: String - contextPath: PrismaAIRs.RuntimeScan.timeout description: Whether any detection service timed out. type: Boolean - contextPath: PrismaAIRs.RuntimeScan.error description: Whether any detection service encountered an error. type: Boolean - contextPath: PrismaAIRs.RuntimeScan.errors description: The list of detection service errors or timeouts. type: Unknown - name: prisma-airs-runtime-api-keys-list description: List all Runtime API Keys configured in Prisma AIRs. arguments: - name: limit required: false description: The maximum number of API keys to return. defaultValue: '50' outputs: - contextPath: PrismaAIRs.ApiKey.id description: The API Key ID (UUID). type: String - contextPath: PrismaAIRs.ApiKey.name description: The API Key name. type: String - contextPath: PrismaAIRs.ApiKey.last8 description: The last 8 characters of the API key (for identification). type: String - contextPath: PrismaAIRs.ApiKey.created_at description: The API Key creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKey.expires_at description: The API Key expiration timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKey.revoked description: Whether the API key has been revoked. type: Boolean - name: prisma-airs-runtime-api-keys-create description: Create a new Runtime API Key. WARNING - The full API key secret is only shown once during creation. Save it securely. arguments: - name: api_key_name required: true description: The name for the new API key. - name: auth_code required: true description: The deployment profile auth code (obtained from deployment profile). - name: cust_app required: true description: The customer application name using this API key. - name: rotation_time_interval required: true description: The rotation time interval (number). - name: rotation_time_unit required: true description: The rotation time unit. auto: PREDEFINED predefined: - hours - days - months - name: created_by required: true description: The email of the user creating the API key. - name: dp_name required: false description: The deployment profile name (optional). - name: cust_env required: true description: The customer environment (e.g., production, staging). The underlying customer app record mandates an environment value; omitting it causes the API to return "Error inserting/updating customer app record", so this argument is required. - name: cust_cloud_provider required: true description: The customer cloud provider (e.g., aws, gcp, azure). The underlying customer app record mandates a cloud provider value; omitting it causes the API to return "Error inserting/updating customer app record", so this argument is required. - name: cust_ai_agent_framework required: false description: The customer AI agent framework (optional). outputs: - contextPath: PrismaAIRs.ApiKeyCreate.id description: The created API Key ID (UUID). type: String - contextPath: PrismaAIRs.ApiKeyCreate.name description: The API Key name. type: String - contextPath: PrismaAIRs.ApiKeyCreate.api_key description: The FULL API KEY SECRET - Only shown once! Save this securely. type: String - contextPath: PrismaAIRs.ApiKeyCreate.last8 description: The last 8 characters of the API key. type: String - contextPath: PrismaAIRs.ApiKeyCreate.auth_code description: The auth code associated with the key. type: String - contextPath: PrismaAIRs.ApiKeyCreate.expires_at description: The API Key expiration timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKeyCreate.revoked description: Whether the API key has been revoked. type: Boolean - contextPath: PrismaAIRs.ApiKeyCreate.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKeyCreate.created_by description: The user who created the key. type: String - contextPath: PrismaAIRs.ApiKeyCreate.cust_app description: The customer application name. type: String - name: prisma-airs-runtime-api-keys-regenerate execution: true description: Regenerate an existing Runtime API Key. WARNING - This creates a NEW key with a NEW UUID and invalidates the old key. The new secret is only shown once. arguments: - name: api_key_id required: true description: The UUID of the API key to regenerate. - name: rotation_time_interval required: true description: The new rotation time interval (number). - name: rotation_time_unit required: true description: The new rotation time unit. auto: PREDEFINED predefined: - hours - days - months - name: updated_by required: false description: The email of the user performing regeneration (optional). outputs: - contextPath: PrismaAIRs.ApiKeyRegenerate.id description: The NEW API Key ID (UUID) - different from the old one. type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.name description: The API Key name (same as before). type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.api_key description: The NEW FULL API KEY SECRET - Only shown once! The old key is now invalid. type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.last8 description: The last 8 characters of the new API key. type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.auth_code description: The auth code associated with the key. type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.expires_at description: The new expiration timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKeyRegenerate.revoked description: Whether the API key has been revoked. type: Boolean - contextPath: PrismaAIRs.ApiKeyRegenerate.updated_at description: The update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.ApiKeyRegenerate.updated_by description: The user who regenerated the key. type: String - contextPath: PrismaAIRs.ApiKeyRegenerate.cust_app description: The customer application name. type: String - name: prisma-airs-runtime-api-keys-delete execution: true description: Delete a Runtime API Key by name. WARNING - This action cannot be undone and immediately revokes access for all applications using this key. arguments: - name: api_key_name required: true description: The name of the API key to delete. - name: updated_by required: true description: The email of the user performing the deletion. outputs: - contextPath: PrismaAIRs.ApiKeyDeleted.api_key_name description: The name of the deleted API key. type: String - contextPath: PrismaAIRs.ApiKeyDeleted.deleted_by description: The email of the user who deleted the key. type: String - contextPath: PrismaAIRs.ApiKeyDeleted.message description: The deletion confirmation message. type: String - contextPath: PrismaAIRs.ApiKeyDeleted.deleted description: The boolean indicating successful deletion. type: Boolean - name: prisma-airs-runtime-profiles-list description: List all runtime security profiles. arguments: - name: limit required: false description: The maximum number of profiles to return. defaultValue: '50' outputs: - contextPath: PrismaAIRs.SecurityProfile.id description: The profile ID (UUID). type: String - contextPath: PrismaAIRs.SecurityProfile.name description: The profile name. type: String - contextPath: PrismaAIRs.SecurityProfile.revision description: The profile revision number. type: Number - contextPath: PrismaAIRs.SecurityProfile.active description: Whether the profile is active. type: Boolean - contextPath: PrismaAIRs.SecurityProfile.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.SecurityProfile.updated_by description: The user who last updated the profile. type: String - contextPath: PrismaAIRs.SecurityProfile.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.SecurityProfile.tsg_id description: The tenant Service Group ID. type: String - name: prisma-airs-runtime-profiles-get description: Get a specific security profile by ID or name. Returns the highest-revision profile if filtering by name. arguments: - name: profile_id required: false description: The profile UUID (either profile_id or profile_name is required). - name: profile_name required: false description: The profile name (returns highest-revision match if multiple exist). outputs: - contextPath: PrismaAIRs.SecurityProfileGet.id description: The profile ID (UUID). type: String - contextPath: PrismaAIRs.SecurityProfileGet.name description: The profile name. type: String - contextPath: PrismaAIRs.SecurityProfileGet.revision description: The profile revision number. type: Number - contextPath: PrismaAIRs.SecurityProfileGet.active description: Whether the profile is active. type: Boolean - contextPath: PrismaAIRs.SecurityProfileGet.policy description: The full policy configuration (AI security profiles and DLP data profiles). type: Unknown - contextPath: PrismaAIRs.SecurityProfileGet.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.SecurityProfileGet.updated_by description: The user who last updated the profile. type: String - contextPath: PrismaAIRs.SecurityProfileGet.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.SecurityProfileGet.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.SecurityProfileGet.csp_id description: The cloud Service Provider ID. type: String - name: prisma-airs-runtime-profiles-create description: Create a new security profile with custom policy configuration. arguments: - name: profile_name required: true description: The name for the new security profile (must be unique). - name: active required: false description: Whether the profile should be active. defaultValue: 'true' auto: PREDEFINED predefined: - 'true' - 'false' - name: policy required: false description: The policy configuration as JSON string. Structure - ai-security-profiles array and dlp-data-profiles array. If omitted, creates empty policy. outputs: - contextPath: PrismaAIRs.SecurityProfileCreate.id description: The profile ID (UUID). type: String - contextPath: PrismaAIRs.SecurityProfileCreate.name description: The profile name. type: String - contextPath: PrismaAIRs.SecurityProfileCreate.revision description: The profile revision number (starts at 1). type: Number - contextPath: PrismaAIRs.SecurityProfileCreate.active description: Whether the profile is active. type: Boolean - contextPath: PrismaAIRs.SecurityProfileCreate.policy description: The full policy configuration. type: Unknown - contextPath: PrismaAIRs.SecurityProfileCreate.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.SecurityProfileCreate.updated_by description: The user who last updated the profile. type: String - contextPath: PrismaAIRs.SecurityProfileCreate.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.SecurityProfileCreate.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.SecurityProfileCreate.csp_id description: The cloud Service Provider ID. type: String - name: prisma-airs-runtime-profiles-update description: Update an existing security profile. WARNING - Modifying profile configuration can break scanning if misconfigured. arguments: - name: profile_id required: true description: The profile UUID to update. - name: profile_name required: true description: The profile name (can be changed or kept the same). - name: active required: false description: Whether the profile should be active. auto: PREDEFINED predefined: - 'true' - 'false' - name: policy required: false description: The updated policy configuration as JSON string. If omitted, policy remains unchanged. outputs: - contextPath: PrismaAIRs.SecurityProfileUpdate.id description: The profile ID (UUID). type: String - contextPath: PrismaAIRs.SecurityProfileUpdate.name description: The profile name. type: String - contextPath: PrismaAIRs.SecurityProfileUpdate.revision description: The profile revision number (incremented after update). type: Number - contextPath: PrismaAIRs.SecurityProfileUpdate.active description: Whether the profile is active. type: Boolean - contextPath: PrismaAIRs.SecurityProfileUpdate.policy description: The full policy configuration. type: Unknown - contextPath: PrismaAIRs.SecurityProfileUpdate.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.SecurityProfileUpdate.updated_by description: The user who last updated the profile. type: String - contextPath: PrismaAIRs.SecurityProfileUpdate.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.SecurityProfileUpdate.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.SecurityProfileUpdate.csp_id description: The cloud Service Provider ID. type: String - name: prisma-airs-runtime-profiles-delete execution: true description: Delete a security profile. WARNING - This action cannot be undone and permanently removes the profile. arguments: - name: profile_id required: true description: The profile UUID to delete. - name: force auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' description: Whether to force-delete the profile, bypassing safety checks. Requires updated_by. - name: updated_by description: The email of the user performing the deletion. Required when force is true. outputs: - contextPath: PrismaAIRs.SecurityProfileDeleted.profile_id description: The deleted profile ID. type: String - contextPath: PrismaAIRs.SecurityProfileDeleted.message description: The deletion confirmation message. type: String - contextPath: PrismaAIRs.SecurityProfileDeleted.deleted description: The boolean indicating successful deletion. type: Boolean - contextPath: PrismaAIRs.SecurityProfileDeleted.force description: Whether the profile was force-deleted. type: Boolean - name: prisma-airs-runtime-customer-apps-list description: List all customer applications. arguments: - name: limit required: false description: The maximum number of customer apps to return. defaultValue: '50' outputs: - contextPath: PrismaAIRs.CustomerApp.id description: The customer App ID. type: String - contextPath: PrismaAIRs.CustomerApp.name description: The customer App name. type: String - contextPath: PrismaAIRs.CustomerApp.model_name description: The model name used by the app. type: String - contextPath: PrismaAIRs.CustomerApp.cloud_provider description: The cloud provider. type: String - contextPath: PrismaAIRs.CustomerApp.environment description: The environment (prod, staging, dev). type: String - contextPath: PrismaAIRs.CustomerApp.ai_agent_framework description: The AI agent framework used. type: String - contextPath: PrismaAIRs.CustomerApp.tsg_id description: The tenant Service Group ID. type: String - name: prisma-airs-runtime-customer-apps-get description: Get customer application details by name. arguments: - name: app_name required: true description: The name of the customer application to retrieve. outputs: - contextPath: PrismaAIRs.CustomerAppGet.id description: The customer App ID (UUID). type: String - contextPath: PrismaAIRs.CustomerAppGet.name description: The customer App name. type: String - contextPath: PrismaAIRs.CustomerAppGet.model_name description: The model name used by the app. type: String - contextPath: PrismaAIRs.CustomerAppGet.cloud_provider description: The cloud provider (aws, azure, gcp, other). type: String - contextPath: PrismaAIRs.CustomerAppGet.environment description: The environment (prod, staging, dev). type: String - contextPath: PrismaAIRs.CustomerAppGet.ai_agent_framework description: The AI agent framework used. type: String - contextPath: PrismaAIRs.CustomerAppGet.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.CustomerAppGet.status description: The customer App status. type: String - contextPath: PrismaAIRs.CustomerAppGet.created_by description: The email of user who created the app. type: String - contextPath: PrismaAIRs.CustomerAppGet.updated_by description: The email of user who last updated the app. type: String - name: prisma-airs-runtime-customer-apps-update description: Update a customer application configuration. arguments: - name: customer_app_id required: true description: The UUID of the customer application to update. - name: app_name required: true description: The application name. - name: cloud_provider required: true description: The cloud provider. auto: PREDEFINED predefined: - aws - azure - gcp - other - name: environment required: true description: The environment. auto: PREDEFINED predefined: - prod - staging - dev - name: tsg_id required: false description: The tenant Service Group ID. If not provided, the configured TSG ID is used. - name: model_name required: false description: The model name used by the application. - name: ai_agent_framework required: false description: The AI agent framework used by the application. - name: updated_by required: false description: The email of user performing the update. outputs: - contextPath: PrismaAIRs.CustomerAppUpdate.id description: The customer App ID (UUID). type: String - contextPath: PrismaAIRs.CustomerAppUpdate.name description: The customer App name. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.model_name description: The model name used by the app. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.cloud_provider description: The cloud provider (aws, azure, gcp, other). type: String - contextPath: PrismaAIRs.CustomerAppUpdate.environment description: The environment (prod, staging, dev). type: String - contextPath: PrismaAIRs.CustomerAppUpdate.ai_agent_framework description: The AI agent framework used. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.status description: The customer App status. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.created_by description: The email of user who created the app. type: String - contextPath: PrismaAIRs.CustomerAppUpdate.updated_by description: The email of user who last updated the app. type: String - name: prisma-airs-runtime-customer-apps-consumption description: Get per-application token consumption and session statistics over the requested time window. arguments: - name: app_id required: true description: The customer Application UUID (from customer-apps-list or customer-apps-get). - name: app_name required: true description: The application display name (literal metadata.app_name value from scan payloads). - name: time_interval required: false description: The look-back window in days (7, 30, or 60). defaultValue: '30' auto: PREDEFINED predefined: - '7' - '30' - '60' - name: time_unit required: false description: The time unit (only 'days' is supported by API). defaultValue: days outputs: - contextPath: PrismaAIRs.CustomerAppConsumption.id description: The customer App ID. type: String - contextPath: PrismaAIRs.CustomerAppConsumption.name description: The application name. type: String - contextPath: PrismaAIRs.CustomerAppConsumption.cloud description: The cloud provider. type: String - contextPath: PrismaAIRs.CustomerAppConsumption.source description: The source (api, sdk, etc.). type: String - contextPath: PrismaAIRs.CustomerAppConsumption.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.CustomerAppConsumption.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.CustomerAppConsumption.profiles description: The attached security profiles. type: Unknown - contextPath: PrismaAIRs.CustomerAppConsumption.average_daily_tokens description: The average daily token consumption. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.average_daily_tokens_scale description: The scale for daily tokens (K, M, etc.). type: String - contextPath: PrismaAIRs.CustomerAppConsumption.monthly_total_tokens description: The monthly total token consumption. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.monthly_total_tokens_scale description: The scale for monthly tokens (K, M, etc.). type: String - contextPath: PrismaAIRs.CustomerAppConsumption.sessions_total description: The total sessions in time window. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.sessions_violating description: The number of violating sessions. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.last_session_id description: The last session ID. type: String - contextPath: PrismaAIRs.CustomerAppConsumption.most_recent_session_time description: The most recent session timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.CustomerAppConsumption.violations_critical description: The critical violations count. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.violations_high description: The high violations count. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.violations_medium description: The medium violations count. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.violations_low description: The low violations count. type: Number - contextPath: PrismaAIRs.CustomerAppConsumption.violations_total description: The total violations count. type: Number - name: prisma-airs-runtime-customer-apps-violations description: Get per-detector violation severity breakdown for an application over the requested time window. arguments: - name: app_id required: true description: The customer Application UUID (from customer-apps-list or customer-apps-get). - name: app_name required: true description: The application display name (literal metadata.app_name value from scan payloads). - name: time_interval required: false description: The look-back window in days (7, 30, or 60). defaultValue: '30' auto: PREDEFINED predefined: - '7' - '30' - '60' - name: time_unit required: false description: The time unit (only 'days' is supported by API). defaultValue: days outputs: - contextPath: PrismaAIRs.CustomerAppViolations.app_id description: The customer App ID. type: String - contextPath: PrismaAIRs.CustomerAppViolations.app_name description: The application name. type: String - contextPath: PrismaAIRs.CustomerAppViolations.total_violating description: The total number of violating sessions. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.time_interval description: The time window in days. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.time_unit description: The time unit used. type: String - contextPath: PrismaAIRs.CustomerAppViolations.detectors description: The per-detector violation breakdown array. type: Unknown - contextPath: PrismaAIRs.CustomerAppViolations.detectors.detection_type description: The detector type (agent_security, dbs, dlp, malicious_code, pi, source_code, tc, topic_guardrails, uf, contextual_grounding). type: String - contextPath: PrismaAIRs.CustomerAppViolations.detectors.critical description: The critical violations count for this detector. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.detectors.high description: The high violations count for this detector. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.detectors.medium description: The medium violations count for this detector. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.detectors.low description: The low violations count for this detector. type: Number - contextPath: PrismaAIRs.CustomerAppViolations.detectors.total description: The total violations count for this detector. type: Number - name: prisma-airs-runtime-customer-apps-delete execution: true description: Delete a customer application and all associated API keys. WARNING - This action cannot be undone and immediately revokes all API keys for this application. arguments: - name: app_name required: true description: The name of the customer application to delete. - name: updated_by required: true description: The email of the user performing the deletion. outputs: - contextPath: PrismaAIRs.CustomerAppDeleted.app_name description: The name of the deleted customer application. type: String - contextPath: PrismaAIRs.CustomerAppDeleted.deleted_by description: The email of the user who deleted the application. type: String - contextPath: PrismaAIRs.CustomerAppDeleted.message description: The deletion confirmation message. type: String - contextPath: PrismaAIRs.CustomerAppDeleted.deleted description: The boolean indicating successful deletion. type: Boolean - name: prisma-airs-runtime-deployment-profiles-list description: List all deployment profiles. arguments: - name: limit required: false description: The maximum number of deployment profiles to return. defaultValue: '50' - name: unactivated required: false description: Whether to show only unactivated profiles. defaultValue: 'false' auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: PrismaAIRs.DeploymentProfile.name description: The deployment Profile name. type: String - contextPath: PrismaAIRs.DeploymentProfile.auth_code description: The authentication code. type: String - contextPath: PrismaAIRs.DeploymentProfile.tsg_id description: The tenant Service Group ID. type: String - contextPath: PrismaAIRs.DeploymentProfile.status description: The profile status. type: String - contextPath: PrismaAIRs.DeploymentProfile.expiration_date description: The expiration date in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DeploymentProfile.ave_text_records description: The average text records. type: Number - name: prisma-airs-runtime-dlp-profiles-list description: List all DLP data profiles (v2 API). arguments: - name: page required: false description: The page number for pagination. defaultValue: '0' - name: size required: false description: The number of results per page. defaultValue: '50' outputs: - contextPath: PrismaAIRs.DlpProfile.id description: The DLP Profile ID. type: String - contextPath: PrismaAIRs.DlpProfile.name description: The DLP Profile name. type: String - contextPath: PrismaAIRs.DlpProfile.description description: The DLP Profile description. type: String - contextPath: PrismaAIRs.DlpProfile.tenant_id description: The tenant ID. type: String - contextPath: PrismaAIRs.DlpProfile.type description: The profile type (custom or predefined). type: String - contextPath: PrismaAIRs.DlpProfile.profile_status description: The profile status (active, disabled, deleted). type: String - contextPath: PrismaAIRs.DlpProfile.profile_type description: The profile type (basic or advanced). type: String - contextPath: PrismaAIRs.DlpProfile.is_granular_data_profile description: Whether this is a granular data profile. type: Boolean - contextPath: PrismaAIRs.DlpProfile.is_parent_managed description: Whether the profile is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpProfile.version description: The DLP Profile version. type: Number - contextPath: PrismaAIRs.DlpProfile.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfile.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfile.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.DlpProfile.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-dlp-profiles-get description: Get a single DLP data profile by ID. arguments: - name: profile_id required: true description: The ID of the DLP data profile to retrieve. outputs: - contextPath: PrismaAIRs.DlpProfileGet.id description: The DLP Profile ID. type: String - contextPath: PrismaAIRs.DlpProfileGet.name description: The DLP Profile name. type: String - contextPath: PrismaAIRs.DlpProfileGet.description description: The DLP Profile description. type: String - contextPath: PrismaAIRs.DlpProfileGet.tenant_id description: The tenant ID. type: String - contextPath: PrismaAIRs.DlpProfileGet.type description: The profile type (custom or predefined). type: String - contextPath: PrismaAIRs.DlpProfileGet.profile_status description: The profile status (active, disabled, deleted). type: String - contextPath: PrismaAIRs.DlpProfileGet.profile_type description: The profile type (basic or advanced). type: String - contextPath: PrismaAIRs.DlpProfileGet.is_granular_data_profile description: Whether this is a granular data profile. type: Boolean - contextPath: PrismaAIRs.DlpProfileGet.is_parent_managed description: Whether the profile is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpProfileGet.version description: The DLP Profile version. type: Number - contextPath: PrismaAIRs.DlpProfileGet.detection_rules description: The detection rules array (expression_tree or multi_profile). type: Unknown - contextPath: PrismaAIRs.DlpProfileGet.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfileGet.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfileGet.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.DlpProfileGet.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-dlp-profiles-create description: Create a new DLP data profile with detection rules. arguments: - name: name required: true description: The profile name (1-64 characters). - name: detection_rules required: true description: The detection rules as JSON array. Each rule must have rule_type (expression_tree or multi_profile) and corresponding structure. - name: description required: false description: The profile description. - name: is_granular_data_profile required: false description: Whether this is a granular data profile. auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: PrismaAIRs.DlpProfileCreate.id description: The DLP Profile ID. type: String - contextPath: PrismaAIRs.DlpProfileCreate.name description: The DLP Profile name. type: String - contextPath: PrismaAIRs.DlpProfileCreate.description description: The DLP Profile description. type: String - contextPath: PrismaAIRs.DlpProfileCreate.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpProfileCreate.profile_status description: The profile status. type: String - contextPath: PrismaAIRs.DlpProfileCreate.profile_type description: The profile type (basic or advanced). type: String - contextPath: PrismaAIRs.DlpProfileCreate.is_granular_data_profile description: Whether this is a granular data profile. type: Boolean - contextPath: PrismaAIRs.DlpProfileCreate.version description: The profile version. type: Number - contextPath: PrismaAIRs.DlpProfileCreate.detection_rules description: The detection rules array. type: Unknown - contextPath: PrismaAIRs.DlpProfileCreate.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfileCreate.created_by description: The user who created the profile. type: String - name: prisma-airs-runtime-dlp-profiles-patch description: Partially update a DLP data profile (JSON Merge Patch). Fields set to "null" will be cleared. arguments: - name: profile_id required: true description: The ID of the DLP data profile to update. - name: name required: true description: The profile name (required for PATCH, cannot be cleared). - name: profile_type required: true description: The profile type (required for PATCH, cannot be cleared). auto: PREDEFINED predefined: - basic - advanced - name: description required: false description: The profile description (set to "null" to clear). - name: detection_rules required: false description: The detection rules as JSON array (set to "null" to clear). outputs: - contextPath: PrismaAIRs.DlpProfilePatch.id description: The DLP Profile ID. type: String - contextPath: PrismaAIRs.DlpProfilePatch.name description: The DLP Profile name. type: String - contextPath: PrismaAIRs.DlpProfilePatch.description description: The DLP Profile description. type: String - contextPath: PrismaAIRs.DlpProfilePatch.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpProfilePatch.profile_status description: The profile status. type: String - contextPath: PrismaAIRs.DlpProfilePatch.profile_type description: The profile type. type: String - contextPath: PrismaAIRs.DlpProfilePatch.version description: The profile version. type: Number - contextPath: PrismaAIRs.DlpProfilePatch.detection_rules description: The detection rules array. type: Unknown - contextPath: PrismaAIRs.DlpProfilePatch.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfilePatch.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-dlp-profiles-replace description: Replace (full update) a DLP data profile. This replaces the entire profile configuration. arguments: - name: profile_id required: true description: The ID of the DLP data profile to replace. - name: name required: true description: The profile name (1-64 characters). - name: detection_rules required: true description: The detection rules as JSON array. - name: description required: false description: The profile description. - name: is_granular_data_profile required: false description: Whether this is a granular data profile. auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: PrismaAIRs.DlpProfileReplace.id description: The DLP Profile ID. type: String - contextPath: PrismaAIRs.DlpProfileReplace.name description: The DLP Profile name. type: String - contextPath: PrismaAIRs.DlpProfileReplace.description description: The DLP Profile description. type: String - contextPath: PrismaAIRs.DlpProfileReplace.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpProfileReplace.profile_status description: The profile status. type: String - contextPath: PrismaAIRs.DlpProfileReplace.profile_type description: The profile type. type: String - contextPath: PrismaAIRs.DlpProfileReplace.version description: The profile version. type: Number - contextPath: PrismaAIRs.DlpProfileReplace.detection_rules description: The detection rules array. type: Unknown - contextPath: PrismaAIRs.DlpProfileReplace.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpProfileReplace.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-dlp-profiles-delete execution: true description: Soft-delete a DLP data profile. The DLP API has no DELETE endpoint, so the profile is patched to a deleted lifecycle state (profile_status="deleted"). The command first fetches the profile to obtain its name and profile_type (required by the merge-patch). This action cannot be undone. arguments: - name: profile_id required: true description: The ID of the DLP data profile to delete. outputs: - contextPath: PrismaAIRs.DlpProfileDelete.id description: The ID of the deleted DLP data profile. type: String - contextPath: PrismaAIRs.DlpProfileDelete.name description: The name of the deleted DLP data profile. type: String - contextPath: PrismaAIRs.DlpProfileDelete.profile_status description: The lifecycle status after deletion (deleted). type: String - contextPath: PrismaAIRs.DlpProfileDelete.deleted description: Whether the profile was successfully soft-deleted. type: Boolean - contextPath: PrismaAIRs.DlpProfileDelete.status description: The human-readable deletion status. type: String - name: prisma-airs-runtime-dlp-dictionaries-list description: List DLP dictionaries. arguments: - name: page required: false description: The page number for pagination. defaultValue: '0' - name: size required: false description: The number of results per page. defaultValue: '50' - name: include_keywords required: false description: Whether to include the keyword list in the response. auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' outputs: - contextPath: PrismaAIRs.DlpDictionary.id description: The dictionary ID. type: String - contextPath: PrismaAIRs.DlpDictionary.name description: The dictionary name. type: String - contextPath: PrismaAIRs.DlpDictionary.description description: The dictionary description. type: String - contextPath: PrismaAIRs.DlpDictionary.category description: The dictionary category. type: String - contextPath: PrismaAIRs.DlpDictionary.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpDictionary.type description: The dictionary type (predefined or custom). type: String - contextPath: PrismaAIRs.DlpDictionary.is_case_sensitive description: Whether the dictionary is case sensitive. type: Boolean - contextPath: PrismaAIRs.DlpDictionary.detection_technique description: The detection technique. type: String - contextPath: PrismaAIRs.DlpDictionary.number_of_keywords description: The number of keywords in the dictionary. type: Number - contextPath: PrismaAIRs.DlpDictionary.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionary.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-dlp-dictionaries-get description: Get a single DLP dictionary by ID, optionally including keywords. arguments: - name: dictionary_id required: true description: The ID of the DLP dictionary to retrieve. - name: include_keywords required: false description: Whether to include the keyword list in the response. auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' outputs: - contextPath: PrismaAIRs.DlpDictionaryGet.id description: The dictionary ID. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.name description: The dictionary name. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.description description: The dictionary description. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.category description: The dictionary category. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.type description: The dictionary type (predefined or custom). type: String - contextPath: PrismaAIRs.DlpDictionaryGet.is_case_sensitive description: Whether the dictionary is case sensitive. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryGet.is_parent_managed description: Whether the dictionary is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryGet.detection_technique description: The detection technique. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.detection_sub_technique description: The detection sub-technique. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.dictionary_metadata description: The dictionary metadata (number of keywords, file size, original filename). type: Unknown - contextPath: PrismaAIRs.DlpDictionaryGet.keywords description: The keyword list (only populated if include_keywords is true). type: Unknown - contextPath: PrismaAIRs.DlpDictionaryGet.tags description: The tags (classification array). type: Unknown - contextPath: PrismaAIRs.DlpDictionaryGet.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionaryGet.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionaryGet.created_by description: The user who created the dictionary. type: String - contextPath: PrismaAIRs.DlpDictionaryGet.updated_by description: The user who last updated the dictionary. type: String - name: prisma-airs-runtime-dlp-dictionaries-create description: Create a new DLP dictionary by uploading a keyword file. arguments: - name: name required: true description: The dictionary name. - name: category required: true description: The dictionary category. auto: PREDEFINED predefined: - Academic - Confidential - Employment - Financial - Government - Healthcare - Legal - Marketing - Source Code - name: region_name required: true description: The region name (e.g., us-west-2). - name: entry_id required: true description: The war room entry ID of the keyword file to upload. - name: description required: false description: The dictionary description. - name: is_case_sensitive required: false description: Whether the dictionary is case sensitive. auto: PREDEFINED predefined: - 'true' - 'false' - name: type required: false description: The dictionary type. auto: PREDEFINED predefined: - predefined - custom - name: include_keywords required: false description: Whether to include the keyword list in the response. auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' outputs: - contextPath: PrismaAIRs.DlpDictionaryCreate.id description: The dictionary ID. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.name description: The dictionary name. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.description description: The dictionary description. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.category description: The dictionary category. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.type description: The dictionary type. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.is_case_sensitive description: Whether the dictionary is case sensitive. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryCreate.detection_technique description: The detection technique. type: String - contextPath: PrismaAIRs.DlpDictionaryCreate.dictionary_metadata description: The dictionary metadata. type: Unknown - contextPath: PrismaAIRs.DlpDictionaryCreate.keywords description: The keyword list. type: Unknown - contextPath: PrismaAIRs.DlpDictionaryCreate.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionaryCreate.created_by description: The user who created the dictionary. type: String - name: prisma-airs-runtime-dlp-dictionaries-patch description: Partially update a DLP dictionary (JSON Merge Patch). Fields set to "null" will be cleared. arguments: - name: dictionary_id required: true description: The ID of the DLP dictionary to update. - name: name required: true description: The dictionary name (required for PATCH, cannot be cleared). - name: category required: true description: The dictionary category (required for PATCH, cannot be cleared). auto: PREDEFINED predefined: - Academic - Confidential - Employment - Financial - Government - Healthcare - Legal - Marketing - Source Code - name: original_file_name required: true description: The original filename (required for PATCH, cannot be cleared). - name: description required: false description: The dictionary description (set to "null" to clear). - name: is_case_sensitive required: false description: Whether the dictionary is case sensitive (set to "null" to clear). auto: PREDEFINED predefined: - 'true' - 'false' - 'null' - name: region_name required: false description: The region name (set to "null" to clear). outputs: - contextPath: PrismaAIRs.DlpDictionaryPatch.id description: The dictionary ID. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.name description: The dictionary name. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.description description: The dictionary description. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.category description: The dictionary category. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.type description: The dictionary type. type: String - contextPath: PrismaAIRs.DlpDictionaryPatch.is_case_sensitive description: Whether the dictionary is case sensitive. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryPatch.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionaryPatch.updated_by description: The user who last updated the dictionary. type: String - name: prisma-airs-runtime-dlp-dictionaries-replace description: Replace (full update) a DLP dictionary by uploading a new keyword file. arguments: - name: dictionary_id required: true description: The ID of the DLP dictionary to replace. - name: name required: true description: The dictionary name. - name: category required: true description: The dictionary category. auto: PREDEFINED predefined: - Academic - Confidential - Employment - Financial - Government - Healthcare - Legal - Marketing - Source Code - name: region_name required: true description: The region name (e.g., us-west-2). - name: entry_id required: true description: The war room entry ID of the keyword file to upload. - name: description required: false description: The dictionary description. - name: is_case_sensitive required: false description: Whether the dictionary is case sensitive. auto: PREDEFINED predefined: - 'true' - 'false' - name: type required: false description: The dictionary type. auto: PREDEFINED predefined: - predefined - custom - name: include_keywords required: false description: Whether to include the keyword list in the response. auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' outputs: - contextPath: PrismaAIRs.DlpDictionaryReplace.id description: The dictionary ID. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.name description: The dictionary name. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.description description: The dictionary description. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.category description: The dictionary category. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.type description: The dictionary type. type: String - contextPath: PrismaAIRs.DlpDictionaryReplace.is_case_sensitive description: Whether the dictionary is case sensitive. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryReplace.keywords description: The keyword list. type: Unknown - contextPath: PrismaAIRs.DlpDictionaryReplace.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpDictionaryReplace.updated_by description: The user who last updated the dictionary. type: String - name: prisma-airs-runtime-dlp-dictionaries-delete execution: true description: Delete a DLP dictionary. This action cannot be undone. arguments: - name: dictionary_id required: true description: The ID of the DLP dictionary to delete. outputs: - contextPath: PrismaAIRs.DlpDictionaryDelete.id description: The ID of the deleted DLP dictionary. type: String - contextPath: PrismaAIRs.DlpDictionaryDelete.deleted description: Whether the dictionary was successfully deleted. type: Boolean - contextPath: PrismaAIRs.DlpDictionaryDelete.status description: The human-readable deletion status. type: String - name: prisma-airs-runtime-dlp-patterns-list description: List DLP data patterns. arguments: - name: page required: false description: The page number for pagination. defaultValue: '0' - name: size required: false description: The number of results per page. defaultValue: '50' outputs: - contextPath: PrismaAIRs.DlpPattern.id description: The pattern ID. type: String - contextPath: PrismaAIRs.DlpPattern.name description: The pattern name. type: String - contextPath: PrismaAIRs.DlpPattern.description description: The pattern description. type: String - contextPath: PrismaAIRs.DlpPattern.category description: The pattern category. type: String - contextPath: PrismaAIRs.DlpPattern.region_name description: The region name. type: String - contextPath: PrismaAIRs.DlpPattern.type description: The pattern type (predefined or custom). type: String - contextPath: PrismaAIRs.DlpPattern.detection_technique description: The detection technique. type: String - contextPath: PrismaAIRs.DlpPattern.detection_sub_technique description: The detection sub-technique. type: String - contextPath: PrismaAIRs.DlpPattern.pattern_status description: The pattern status. type: String - contextPath: PrismaAIRs.DlpPattern.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPattern.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-dlp-patterns-get description: Get a single DLP data pattern by ID. arguments: - name: pattern_id required: true description: The ID of the DLP data pattern to retrieve. outputs: - contextPath: PrismaAIRs.DlpPatternGet.id description: The pattern ID. type: String - contextPath: PrismaAIRs.DlpPatternGet.name description: The pattern name. type: String - contextPath: PrismaAIRs.DlpPatternGet.description description: The pattern description. type: String - contextPath: PrismaAIRs.DlpPatternGet.tenant_id description: The tenant ID. type: String - contextPath: PrismaAIRs.DlpPatternGet.type description: The pattern type (predefined, custom, file_property). type: String - contextPath: PrismaAIRs.DlpPatternGet.status description: The pattern status (active, disabled, deleted, deprecated, silent). type: String - contextPath: PrismaAIRs.DlpPatternGet.license_type description: The license tier (standard, enterprise, essentials). type: String - contextPath: PrismaAIRs.DlpPatternGet.is_parent_managed description: Whether the pattern is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpPatternGet.version description: The pattern version number. type: Number - contextPath: PrismaAIRs.DlpPatternGet.detection_config description: The detection configuration (technique and confidence levels). type: Unknown - contextPath: PrismaAIRs.DlpPatternGet.matching_rules description: The matching rules (proximity, delimiters, regexes, metadata). type: Unknown - contextPath: PrismaAIRs.DlpPatternGet.tags description: The tags (classification, compliance, geography). type: Unknown - contextPath: PrismaAIRs.DlpPatternGet.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPatternGet.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPatternGet.created_by description: The user who created the pattern. type: String - contextPath: PrismaAIRs.DlpPatternGet.updated_by description: The user who last updated the pattern. type: String - name: prisma-airs-runtime-dlp-patterns-create description: Create a new DLP data pattern. arguments: - name: name required: true description: The pattern name (1-64 characters). - name: type required: true description: The pattern type. auto: PREDEFINED predefined: - predefined - custom - file_property - name: detection_technique required: true description: The detection technique. auto: PREDEFINED predefined: - edm - document_fingerprint - trainable_classifier - ml_document - regex - weighted_regex - ml - titus_tag - wildfire - file_property - dictionary - pab - document_classifier - name: supported_confidence_levels required: false isArray: true description: A comma-separated list of confidence levels (low, medium, high). Alternatively, a JSON array. - name: description required: false description: The pattern description. - name: matching_rules required: false description: The matching rules as JSON object (proximity, delimiters, regexes, metadata_criteria). - name: tags required: false description: The tags as JSON object with classification, compliance, geography arrays. outputs: - contextPath: PrismaAIRs.DlpPatternCreate.id description: The pattern ID. type: String - contextPath: PrismaAIRs.DlpPatternCreate.name description: The pattern name. type: String - contextPath: PrismaAIRs.DlpPatternCreate.description description: The pattern description. type: String - contextPath: PrismaAIRs.DlpPatternCreate.type description: The pattern type. type: String - contextPath: PrismaAIRs.DlpPatternCreate.status description: The pattern status. type: String - contextPath: PrismaAIRs.DlpPatternCreate.detection_config description: The detection configuration. type: Unknown - contextPath: PrismaAIRs.DlpPatternCreate.matching_rules description: The matching rules. type: Unknown - contextPath: PrismaAIRs.DlpPatternCreate.tags description: The tags. type: Unknown - contextPath: PrismaAIRs.DlpPatternCreate.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPatternCreate.created_by description: The user who created the pattern. type: String - name: prisma-airs-runtime-dlp-patterns-patch description: Partially update a DLP data pattern (JSON Merge Patch). Fields set to "null" will be cleared. arguments: - name: pattern_id required: true description: The ID of the DLP data pattern to update. - name: name required: true description: The pattern name (required for PATCH, cannot be cleared). - name: type required: true description: The pattern type (required for PATCH, cannot be cleared). auto: PREDEFINED predefined: - predefined - custom - file_property - name: detection_technique required: true description: The detection technique (required for PATCH, cannot be cleared). auto: PREDEFINED predefined: - edm - document_fingerprint - trainable_classifier - ml_document - regex - weighted_regex - ml - titus_tag - wildfire - file_property - dictionary - pab - document_classifier - name: supported_confidence_levels required: false isArray: true description: A comma-separated list of confidence levels (low, medium, high). Alternatively, a JSON array. - name: description required: false description: The pattern description (set to "null" to clear). - name: matching_rules required: false description: The matching rules as JSON object (set to "null" to clear). - name: tags required: false description: The tags as JSON object (set to "null" to clear). outputs: - contextPath: PrismaAIRs.DlpPatternPatch.id description: The pattern ID. type: String - contextPath: PrismaAIRs.DlpPatternPatch.name description: The pattern name. type: String - contextPath: PrismaAIRs.DlpPatternPatch.description description: The pattern description. type: String - contextPath: PrismaAIRs.DlpPatternPatch.type description: The pattern type. type: String - contextPath: PrismaAIRs.DlpPatternPatch.status description: The pattern status. type: String - contextPath: PrismaAIRs.DlpPatternPatch.version description: The pattern version number. type: Number - contextPath: PrismaAIRs.DlpPatternPatch.detection_config description: The detection configuration. type: Unknown - contextPath: PrismaAIRs.DlpPatternPatch.matching_rules description: The matching rules. type: Unknown - contextPath: PrismaAIRs.DlpPatternPatch.tags description: The tags. type: Unknown - contextPath: PrismaAIRs.DlpPatternPatch.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPatternPatch.updated_by description: The user who last updated the pattern. type: String - name: prisma-airs-runtime-dlp-patterns-replace description: Replace (full update) a DLP data pattern. This replaces the entire pattern configuration. arguments: - name: pattern_id required: true description: The ID of the DLP data pattern to replace. - name: name required: true description: The pattern name (1-64 characters). - name: type required: true description: The pattern type. auto: PREDEFINED predefined: - predefined - custom - file_property - name: detection_technique required: true description: The detection technique. auto: PREDEFINED predefined: - edm - document_fingerprint - trainable_classifier - ml_document - regex - weighted_regex - ml - titus_tag - wildfire - file_property - dictionary - pab - document_classifier - name: supported_confidence_levels required: false isArray: true description: A comma-separated list of confidence levels (low, medium, high). Alternatively, a JSON array. - name: description required: false description: The pattern description. - name: matching_rules required: false description: The matching rules as JSON object. - name: tags required: false description: The tags as JSON object. outputs: - contextPath: PrismaAIRs.DlpPatternReplace.id description: The pattern ID. type: String - contextPath: PrismaAIRs.DlpPatternReplace.name description: The pattern name. type: String - contextPath: PrismaAIRs.DlpPatternReplace.description description: The pattern description. type: String - contextPath: PrismaAIRs.DlpPatternReplace.type description: The pattern type. type: String - contextPath: PrismaAIRs.DlpPatternReplace.status description: The pattern status. type: String - contextPath: PrismaAIRs.DlpPatternReplace.version description: The pattern version number. type: Number - contextPath: PrismaAIRs.DlpPatternReplace.detection_config description: The detection configuration. type: Unknown - contextPath: PrismaAIRs.DlpPatternReplace.matching_rules description: The matching rules. type: Unknown - contextPath: PrismaAIRs.DlpPatternReplace.tags description: The tags. type: Unknown - contextPath: PrismaAIRs.DlpPatternReplace.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpPatternReplace.updated_by description: The user who last updated the pattern. type: String - name: prisma-airs-runtime-dlp-patterns-delete execution: true description: Delete (soft-delete/archive) a DLP data pattern. This action cannot be undone. arguments: - name: pattern_id required: true description: The ID of the DLP data pattern to delete. outputs: - contextPath: PrismaAIRs.DlpPatternDelete.id description: The ID of the deleted DLP data pattern. type: String - contextPath: PrismaAIRs.DlpPatternDelete.deleted description: Whether the pattern was successfully deleted. type: Boolean - contextPath: PrismaAIRs.DlpPatternDelete.status description: The human-readable deletion status. type: String - name: prisma-airs-runtime-dlp-filtering-profiles-list description: List DLP filtering profiles. arguments: - name: page required: false description: The page number for pagination. defaultValue: '0' - name: size required: false description: The number of results per page. defaultValue: '50' outputs: - contextPath: PrismaAIRs.DlpFilteringProfile.id description: The filtering profile ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfile.name description: The filtering profile name. type: String - contextPath: PrismaAIRs.DlpFilteringProfile.description description: The filtering profile description. type: String - contextPath: PrismaAIRs.DlpFilteringProfile.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpFilteringProfile.default_action description: The default action for the profile. type: String - contextPath: PrismaAIRs.DlpFilteringProfile.is_parent_managed description: Whether the profile is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfile.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpFilteringProfile.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-dlp-filtering-profiles-get description: Get a single DLP filtering profile by ID. arguments: - name: profile_id required: true description: The ID of the DLP filtering profile to retrieve. outputs: - contextPath: PrismaAIRs.DlpFilteringProfileGet.id description: The filtering profile ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.name description: The filtering profile name. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.description description: The filtering profile description. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.tenant_id description: The tenant ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.data_profile_id description: The associated data profile ID. type: Number - contextPath: PrismaAIRs.DlpFilteringProfileGet.direction description: The scan direction (BOTH, UPLOAD, DOWNLOAD). type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.file_based description: Whether file-based scanning is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileGet.non_file_based description: Whether non-file-based scanning is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileGet.log_severity description: The log severity level. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.scan_type description: The scan type (include or exclude). type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.is_end_user_coaching_enabled description: Whether end user coaching is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileGet.is_granular_profile description: Whether this is a granular profile. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileGet.is_parent_managed description: Whether the profile is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileGet.euc_template_id description: The end user coaching template ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.version description: The profile version number. type: Number - contextPath: PrismaAIRs.DlpFilteringProfileGet.file_type description: The allowed file types for scanning. type: Unknown - contextPath: PrismaAIRs.DlpFilteringProfileGet.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpFilteringProfileGet.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpFilteringProfileGet.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.DlpFilteringProfileGet.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-dlp-filtering-profiles-replace description: Replace (full update) a DLP filtering profile. This is a destructive operation that replaces the entire profile configuration. arguments: - name: profile_id required: true description: The ID of the DLP filtering profile to replace. - name: file_based required: true description: Whether file-based scanning is enabled. auto: PREDEFINED predefined: - 'true' - 'false' - name: non_file_based required: true description: Whether non-file-based scanning is enabled. auto: PREDEFINED predefined: - 'true' - 'false' - name: description required: false description: The profile description. - name: direction required: false description: The scan direction. auto: PREDEFINED predefined: - BOTH - UPLOAD - DOWNLOAD - name: log_severity required: false description: The log severity level. auto: PREDEFINED predefined: - CRITICAL - HIGH - MEDIUM - LOW - INFORMATIONAL - name: scan_type required: false description: The scan type (include or exclude file types). auto: PREDEFINED predefined: - include - exclude - name: data_profile_id required: false description: The associated data profile ID (numeric). - name: euc_template_id required: false description: The end user coaching template ID. - name: is_end_user_coaching_enabled required: false description: Whether end user coaching is enabled. auto: PREDEFINED predefined: - 'true' - 'false' - name: is_granular_profile required: false description: Whether this is a granular profile. auto: PREDEFINED predefined: - 'true' - 'false' - name: file_type required: false isArray: true description: A comma-separated list of file types to include or exclude. outputs: - contextPath: PrismaAIRs.DlpFilteringProfileReplace.id description: The filtering profile ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.name description: The filtering profile name. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.description description: The filtering profile description. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.tenant_id description: The tenant ID. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.type description: The profile type. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.data_profile_id description: The associated data profile ID. type: Number - contextPath: PrismaAIRs.DlpFilteringProfileReplace.direction description: The scan direction (BOTH, UPLOAD, DOWNLOAD). type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.file_based description: Whether file-based scanning is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileReplace.non_file_based description: Whether non-file-based scanning is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileReplace.log_severity description: The log severity level. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.scan_type description: The scan type (include or exclude). type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.is_end_user_coaching_enabled description: Whether end user coaching is enabled. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileReplace.is_granular_profile description: Whether this is a granular profile. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileReplace.is_parent_managed description: Whether the profile is parent-managed. type: Boolean - contextPath: PrismaAIRs.DlpFilteringProfileReplace.version description: The profile version number. type: Number - contextPath: PrismaAIRs.DlpFilteringProfileReplace.created_at description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpFilteringProfileReplace.updated_at description: The last update timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.DlpFilteringProfileReplace.created_by description: The user who created the profile. type: String - contextPath: PrismaAIRs.DlpFilteringProfileReplace.updated_by description: The user who last updated the profile. type: String - name: prisma-airs-runtime-topics-list description: List custom topic guardrails. arguments: - name: limit required: false description: The maximum number of topics to return. defaultValue: '100' - name: offset required: false description: The starting offset for pagination. defaultValue: '0' outputs: - contextPath: PrismaAIRs.Topic.topic_id description: The topic UUID. type: String - contextPath: PrismaAIRs.Topic.topic_name description: The topic name. type: String - contextPath: PrismaAIRs.Topic.revision description: The topic revision number. type: Number - contextPath: PrismaAIRs.Topic.description description: The topic description. type: String - contextPath: PrismaAIRs.Topic.examples description: The example prompts for the topic. type: Unknown - contextPath: PrismaAIRs.Topic.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.Topic.created_by description: The user who created the topic. type: String - contextPath: PrismaAIRs.Topic.updated_by description: The user who last updated the topic. type: String - contextPath: PrismaAIRs.Topic.csp_id description: The CSP ID. type: String - contextPath: PrismaAIRs.Topic.tsg_id description: The tenant Service Group ID. type: String - name: prisma-airs-runtime-topics-get description: Get a specific custom topic by ID or name. arguments: - name: topic_id required: false description: The topic UUID (either topic_id or topic_name is required). - name: topic_name required: false description: The topic name. outputs: - contextPath: PrismaAIRs.TopicGet.topic_id description: The topic UUID. type: String - contextPath: PrismaAIRs.TopicGet.topic_name description: The topic name. type: String - contextPath: PrismaAIRs.TopicGet.revision description: The topic revision number. type: Number - contextPath: PrismaAIRs.TopicGet.active description: Whether the topic is active. type: Boolean - contextPath: PrismaAIRs.TopicGet.description description: The topic description. type: String - contextPath: PrismaAIRs.TopicGet.examples description: The example prompts for the topic. type: Unknown - contextPath: PrismaAIRs.TopicGet.created_by description: The user who created the topic. type: String - contextPath: PrismaAIRs.TopicGet.updated_by description: The user who last updated the topic. type: String - contextPath: PrismaAIRs.TopicGet.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.TopicGet.created_ts description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-topics-create description: Create a new custom topic guardrail with examples for detection. arguments: - name: topic_name required: true description: The name for the new topic (must be unique). - name: description required: true description: The description of what this topic detects. - name: examples required: true description: A comma-separated list of example prompts/content that match this topic. isArray: true - name: active required: false description: Whether the topic should be active. defaultValue: 'true' auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: PrismaAIRs.TopicCreate.topic_id description: The topic UUID. type: String - contextPath: PrismaAIRs.TopicCreate.topic_name description: The topic name. type: String - contextPath: PrismaAIRs.TopicCreate.revision description: The topic revision number (starts at 1). type: Number - contextPath: PrismaAIRs.TopicCreate.active description: Whether the topic is active. type: Boolean - contextPath: PrismaAIRs.TopicCreate.description description: The topic description. type: String - contextPath: PrismaAIRs.TopicCreate.examples description: The example prompts for the topic. type: Unknown - contextPath: PrismaAIRs.TopicCreate.created_by description: The user who created the topic. type: String - contextPath: PrismaAIRs.TopicCreate.updated_by description: The user who last updated the topic. type: String - contextPath: PrismaAIRs.TopicCreate.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.TopicCreate.created_ts description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-topics-update description: Update an existing custom topic. WARNING - Modifying topic definition can break detection if misconfigured. arguments: - name: topic_id required: true description: The topic UUID to update. - name: topic_name required: true description: The topic name (can be changed or kept the same). - name: description required: false description: The updated description (if omitted, description remains unchanged). - name: examples required: false description: An updated comma-separated list of examples (if omitted, examples remain unchanged). isArray: true - name: active required: false description: Whether the topic should be active. auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: PrismaAIRs.TopicUpdate.topic_id description: The topic UUID. type: String - contextPath: PrismaAIRs.TopicUpdate.topic_name description: The topic name. type: String - contextPath: PrismaAIRs.TopicUpdate.revision description: The topic revision number (incremented after update). type: Number - contextPath: PrismaAIRs.TopicUpdate.active description: Whether the topic is active. type: Boolean - contextPath: PrismaAIRs.TopicUpdate.description description: The topic description. type: String - contextPath: PrismaAIRs.TopicUpdate.examples description: The example prompts for the topic. type: Unknown - contextPath: PrismaAIRs.TopicUpdate.created_by description: The user who created the topic. type: String - contextPath: PrismaAIRs.TopicUpdate.updated_by description: The user who last updated the topic. type: String - contextPath: PrismaAIRs.TopicUpdate.last_modified_ts description: The last modification timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - contextPath: PrismaAIRs.TopicUpdate.created_ts description: The creation timestamp in ISO 8601 format (e.g., 2024-01-15T12:34:56Z). type: Date - name: prisma-airs-runtime-topics-delete execution: true description: Delete a custom topic. WARNING - This action cannot be undone. Fails if topic is referenced by any security profile (use force to override). arguments: - name: topic_id required: true description: The topic UUID to delete. - name: force auto: PREDEFINED predefined: - 'true' - 'false' defaultValue: 'false' description: Whether to force-delete the topic, removing it from any referencing profiles. - name: updated_by description: The email of the user performing the deletion. Optional for force-delete. outputs: - contextPath: PrismaAIRs.TopicDeleted.topic_id description: The deleted topic ID. type: String - contextPath: PrismaAIRs.TopicDeleted.message description: The deletion confirmation message. type: String - contextPath: PrismaAIRs.TopicDeleted.deleted description: The boolean indicating successful deletion. type: Boolean - contextPath: PrismaAIRs.TopicDeleted.force description: Whether the topic was force-deleted. type: Boolean - name: prisma-airs-runtime-topics-apply description: Apply a topic to a security profile (additive - preserves existing topics). This command orchestrates multiple API calls to assign a custom topic to a profile's topic-guardrails configuration. arguments: - name: profile_name required: true description: The security profile name to apply the topic to. - name: topic_name required: true description: The topic name to apply. The topic must already exist (create with prisma-airs-runtime-topics-create). - name: action required: false auto: PREDEFINED predefined: - allow - block defaultValue: block description: The topic action. 'block' = block prompts matching this topic. 'allow' = allow prompts matching this topic. - name: guardrail_action required: false auto: PREDEFINED predefined: - allow - block defaultValue: block description: The guardrail-level default action. 'block' = block all unless explicitly allowed (requires allow topics). 'allow' = allow all unless explicitly blocked (only block topics needed). outputs: - contextPath: PrismaAIRs.TopicApplied.profile_name description: The security profile name. type: String - contextPath: PrismaAIRs.TopicApplied.profile_id description: The security profile UUID. type: String - contextPath: PrismaAIRs.TopicApplied.topic_name description: The topic name that was applied. type: String - contextPath: PrismaAIRs.TopicApplied.topic_id description: The topic UUID. type: String - contextPath: PrismaAIRs.TopicApplied.topic_revision description: The topic revision number (pinned to ensure consistent detection). type: Number - contextPath: PrismaAIRs.TopicApplied.action description: The topic action (allow or block). type: String - contextPath: PrismaAIRs.TopicApplied.guardrail_action description: The guardrail-level default action. type: String - contextPath: PrismaAIRs.TopicApplied.applied description: The boolean indicating successful application. type: Boolean - name: prisma-airs-runtime-bulk-scan description: Perform bulk scanning of multiple prompts. arguments: - name: profile_name required: true description: The security profile name to use for scanning. - name: prompts_csv required: true description: The CSV content with prompts to scan (must include 'prompt' column header, or use newline-separated format). - name: session_id required: false description: The optional session ID for grouping scans in AIRS dashboard. outputs: - contextPath: PrismaAIRs.BulkScan.profile_name description: The security profile used. type: String - contextPath: PrismaAIRs.BulkScan.session_id description: The session ID. type: String - contextPath: PrismaAIRs.BulkScan.total description: The total prompts scanned. type: Number - contextPath: PrismaAIRs.BulkScan.blocked description: The number of prompts blocked. type: Number - contextPath: PrismaAIRs.BulkScan.allowed description: The number of prompts allowed. type: Number - contextPath: PrismaAIRs.BulkScan.errors description: The number of scan errors. type: Number - contextPath: PrismaAIRs.BulkScan.results description: The array of individual scan results. type: Unknown dockerimage: demisto/python3:3.12.14.12343672 runonce: false script: '-' subtype: python3 type: python tests: - PaloAltoNetworks_Prisma_AIRs_Runtime_Profiles_Test - PaloAltoNetworks_Prisma_AIRs_Runtime_Scan_Test - PaloAltoNetworks_Prisma_AIRs_DLP_Patterns_Test fromversion: 6.10.0